Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/Eh9XCMQRbW1ubx8hy76UM5aNGyc.roa
File: Eh9XCMQRbW1ubx8hy76UM5aNGyc.roa (raw, json)
Hash identifier: KN04kBz2DrUig+q4FZYuHZeS9iDCWMji28XnC73Kpvg=
Subject key identifier: 12:1F:57:08:C4:11:6D:6D:6E:6F:1F:21:CB:BE:94:33:96:8D:1B:27
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 0185DEFFB27B36FE384BE5243445254DA52E
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/Eh9XCMQRbW1ubx8hy76UM5aNGyc.roa
Signing time: Mon 23 Jan 2023 14:19:37 +0000
ROA not before: Mon 23 Jan 2023 14:19:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59758
IP address blocks: 2a01:3f1:e000::/38 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:ff:b2:7b:36:fe:38:4b:e5:24:34:45:25:4d:a5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 23 14:19:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=121f5708c4116d6d6e6f1f21cbbe9433968d1b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:70:e1:e0:59:a8:85:1b:08:65:af:84:ff:
c5:57:ff:af:be:78:a0:84:1a:c7:e3:41:02:3d:59:
cb:f3:b6:a4:e6:43:ec:62:71:3e:c3:8f:be:97:61:
03:90:2d:a9:a1:e4:87:13:78:19:92:56:93:37:00:
60:d8:64:d1:ad:fc:26:86:d0:e8:6c:02:2c:b6:d9:
d4:c2:35:1d:c6:49:34:ca:6b:1d:39:2f:9a:07:52:
7e:b0:37:74:70:b6:7d:44:f3:67:0c:20:a3:e0:3c:
5c:02:cf:b0:d0:db:94:0c:5b:b2:e3:83:2d:17:4d:
b3:63:22:c3:50:a3:18:e0:7e:29:59:5f:3d:0b:63:
28:68:f8:ef:19:27:87:9a:8d:00:1c:be:63:c3:1b:
95:03:bd:73:83:ad:6d:33:c4:48:5a:96:9e:35:00:
75:88:9d:a0:2d:b6:c4:88:e3:18:73:cd:1f:d2:54:
24:38:5f:7b:0e:6f:89:27:ce:8f:b1:b6:e0:c9:e3:
de:38:bc:55:89:49:30:1f:db:40:6b:03:9b:c4:60:
10:32:5b:8b:04:2b:7d:b8:2f:bf:4a:b1:a3:89:5a:
94:27:b8:a7:0c:92:e3:54:c5:ae:1d:f2:c9:5a:cf:
c2:fd:14:a3:38:fb:03:e0:5c:aa:37:ea:ce:9e:dc:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1F:57:08:C4:11:6D:6D:6E:6F:1F:21:CB:BE:94:33:96:8D:1B:27
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/Eh9XCMQRbW1ubx8hy76UM5aNGyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:3f1:e000::/38
Signature Algorithm: sha256WithRSAEncryption
12:63:67:68:72:10:9d:86:42:8f:c7:5f:47:34:7b:f6:2f:e5:
2d:da:91:a1:a5:03:bb:40:b8:b4:a5:3f:d1:3d:e2:93:bc:15:
f2:d8:0f:19:2d:57:03:a4:ab:51:c8:e0:9e:87:7f:6c:a6:09:
21:68:59:c4:01:66:8f:82:6f:34:d8:f5:24:52:60:ca:06:e2:
ec:02:90:62:97:1f:22:b6:6c:54:57:0c:1e:a4:bb:48:92:20:
7f:8a:e4:97:bd:c2:04:5d:b4:d6:f7:fd:9a:f5:fa:7c:88:50:
68:f3:89:d9:7f:8b:75:b5:eb:e1:e2:a2:59:20:db:f0:f0:05:
07:98:7c:c5:a7:db:74:a2:7d:17:8c:50:d7:51:5d:05:23:6e:
14:e4:71:04:05:37:86:c6:15:60:e3:72:02:f7:fd:ac:9a:ba:
2e:54:b1:9c:9e:00:8a:2a:fa:dc:be:c3:8b:0d:22:a7:73:48:
53:85:6d:34:d8:ed:65:a3:66:61:6c:ee:53:2c:fd:4b:4d:ed:
3d:36:db:9e:d3:85:99:c9:b0:0d:96:6d:cc:1b:f7:05:e4:08:
4e:b4:a9:1d:83:b4:2f:17:20:b0:50:1d:cc:e2:aa:7a:4e:95:
7c:8e:5f:de:a9:f0:ca:ed:37:ee:a1:b9:57:de:2b:01:7b:8f:
80:f8:e3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:10 2024 by rpki-client on console-fra.rpki-client.org